DESCRIPTION 

CONTENT REPRODUCTION APPARATUS 



Background of the Invention 

5 

1. Field of the Invention 

The present invention relates to a content reproduction apparatus, 
in particular to a content reproduction apparatus which reproduces 
digital contents. 

10 

2. Description of the Related Art 

Under a digital content copyright protection method for a 
recording media, such as an optical disc equivalent to a Digital 
Versatile Disc (DVD), a Secure Digital (SD) memory card, and a 

15 semiconductor recording media such as a memory stick, contents 
are encrypted and recorded in the media. The encrypted contents 
are decrypted with a key embedded in a content reproduction 
apparatus and reproduced. Under a license agreement with a 
licensor, the licensor gives a license for use of the copyright 

20 protection method, a manufacturer of manufacturing a content 
reproduction apparatus receives a key necessary for decrypting the 
contents (hereafter referred to as "device key") with a license of 
manufacturing a content reproduction apparatus. 

The license agreement includes security implementation 

25 specifications (compliance rule, robustness rule). The following 
implementation conditions are enforced to the licensed 

manufacturer: (i) to implement the received device key in the 

content reproduction apparatus in a format in which a certain level 

of security standard is satisfied; (ii)not to output content data in 

30 plaintext decrypted in the content reproduction apparatus to outside 
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of the content reproduction apparatus via a general external 

interface; and (iii)not to output the content data to an user 

accessible bus in the content reproduction apparatus. 

In compliance with the security implementation specifications 
5 by the mechanism and agreement of the content encryption using a 
device key, the contents recorded in the media can be prevented 
from, without permission, being copied to a hard disc and other 
recording media and being distributed to the Internet. 

However, the mechanism only cannot resist to the threat 

10 caused in the case where the protection implementation applied 
when the manufacturer embedded the device key in the content 
reproduction apparatus and the device key is disclosed. That is, an 
analyzer who disclosed the device key can generate and circulate an 
unauthorized copying tool so as to decrypt an encrypted content and 

15 copy on a hard disc based on the device key (i.e., ignoring the 
security implementation specifications). However, the content 
encryption mechanism only cannot prevent the malpractices by such 
analyzer. 

Accordingly, a key revocation technique has been introduced 
20 to many copyright protection methods as a countermeasure against 
the disclosure of the device key. As a specific method of key 
revocation, for example, there is a method disclosed in Intel 
Corporation et al., ''Content Protection for Recordable Media 
Specification, Introduction and Common Cryptographic Elements," 
25 Revision 1.0, January 17, 2003 (hereafter referred to as ''relevant 
literature"). In this key revocation method, a unique device key is 
given to each content reproduction apparatus. Also, index 
information for identifying a device key (hereafter referred to as 
"device key index information") is assigned to each device key and 
30 given to each content reproduction apparatus with the device key. 
The content reproduction apparatus can decrypt the encrypted 
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content based on the device key and the attached device key index 
information. 

Using this key revocation technique, even if a device key is 
disclosed, the device key can be revoked so that the revoked device 
5 key cannot decrypt contents to be written in a recording media 
manufactured after the revocation or contents recorded in the 
recorded media manufactured after the revocation. Whereas the 
detail about the technique is disclosed in the relevant literature, 
further explanation is not provided in here. Thus, the key 
10 revocation technique can embed a unique device key in each content 
reproduction apparatus and separately revoke the disclosed device 
key. 

However, in the key revocation technique, it is necessary to 
embed a unique device key in each content reproduction apparatus. 

15 Also, the manufacturer has to work so that device keys cannot be 
read out from outside based on the conditions in the license 
agreement. This is very inconvenient for the content reproduction 
apparatus manufacturer. Because, in the case of receiving a repair 
request of the content reproduction apparatus due to operation 

20 malfunction from an end user, it is necessary to know details of the 
device key embedded in the content reproduction apparatus in order 
to specify a malfunctioned part, in particular to judge whether or not 
the malfunction is occurring in the decryption processing unit. For 
example, under a circumstance where some device keys are actually 

25 revoked, it is necessary to know details of the device key in order to 
judge whether the content reproduction apparatus requested to be 
repaired is a content reproduction apparatus in which a revoked 
device key is embedded. However, since the details of the device 
key cannot be known as described above, it is a problem that 

30 whether or not the device key embedded in the content reproduction 
apparatus is revoked cannot be known. 

On the other hand, there is a following problem in another 



perspective. It is necessary to use a device key unique to eacin 
content reproduction apparatus. Also, a licensor of the copyright 
protection method needs to verify anytime about whether the 
manufacturer of the content reproduction apparatus as a licensee is 
5 not performing a malpractice such as embedding same device key 
into a plurality of content reproduction apparatuses ignoring the 
license agreement. In order to fulfill this necessity, in the present 
circumstance, the device key is implemented so as not to be read 
out from the content reproduction apparatus. Therefore, there is a 

10 problem that the licensor of the copyright protection method cannot 
verify whether or not the same device key is embedded in the 
plurality of content reproduction apparatuses. 

In order to resolve above mentioned problems, an object of 
the present invention is to provide a content reproduction apparatus 

15 which can tell whether or not a device key embedded in a content 
reproduction apparatus is revoked or not. 

Further, another object is to provide a content reproduction 
apparatus which can verify whether the same device key is 
embedded in the plurality of content reproduction apparatuses. 

20 

Brief Disclosure of Invention 

A content reproduction apparatus according to an aspect of 
the present invention is a content reproduction apparatus which 
reproduces digital contents, comprising: a secret information 

25 storage unit operable to hold secret information specific to the 
content reproduction apparatus in a manner which does not allow 
access from outside the content reproduction apparatus; an index 
information storage unit operable to hold index information which is 
in a one-to-one association with the secret information; an 

30 instruction receiving unit operable to receive an instruction to 
output the index information; and an index information output unit 
operable to output the index information stored in the index 
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information storage unit to outside based on tine instruction. 

According to this structure, the content reproduction 
apparatus can output the index information which is in a one-to-one 
association with the secret information. Therefore, even after the 
5 content reproduction apparatus is shipped as a product, it is 
possible to verify, to which content reproduction apparatus, that the 
secret information (device key) embedded in the content 
reproduction apparatus is specific. 

Consequently, by examining the displayed index information, 

10 personnel of the manufacturer of the content reproduction 
apparatus and a licensor of the secret information and the index 
information can know about which secret information (device key) is 
embedded in the content reproduction apparatus. Therefore, the 
personnel of the content reproduction apparatus manufacturer can 

15 know whether or not the secret information (device key) embedded 
in the content reproduction apparatus is revoked or not by 
examining the index information. 

Also, the licensor can verify whether the same secret 
information (device key) is embedded in the plurality of the content 

20 reproduction apparatuses by examining whether or not the same 
index information is used in the plurality of the content reproduction 
apparatuses. 

Further, the index information stored in the index information 
storage unit is encrypted according to a predetermined 

25 cryptographic method, and the index information output unit may 
output, based on the instruction, the encrypted index information 
stored in the index information storage unit to outside. 

Even if the index information is encrypted, the same index 
information encrypted with the same key has a same value. 

30 Therefore, the licensor of the secret information can verify whether 
or not the same secret information (device key) is embedded in the 
plurality of the content reproduction apparatuses by examining 
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whether or not the same index information is used in the plurality of 
the content reproduction apparatuses. 

Preferably, the content reproduction apparatus further 
comprises an authentication data storage unit operable to hold 
5 authentication data that is obtained by performing a predetermined 
conversion on the index information. 

If the licensor only can know the predetermined conversion, a 
malpractice by a licensee of the secret information and the index 
information to output dummy index information from the content 

10 reproduction apparatus is prevented by examining whether or not 
the result by which the predetermined conversion is performed on 
the index information outputted from the content reproduction 
apparatus matches with the authentication data stored in the 
authentication data storage unit. 

15 Also, the instruction receiving unit may read a program for 

executing the instruction from a removable recording medium on 
which the program is recorded, and the index information output 
unit may output the index information stored in the index 
information storage unit to outside, by executing the read program. 

20 According to this structure, a disc reading unit which is 

previously placed in an ordinary content reproduction apparatus and 
a video output interface to outside can be used. Therefore, 
basically, the amount of costs required for adding a function to the 
ordinary content reproduction apparatus is small. 

25 Further, on the recording medium, a unique identification 

number is recorded, the instruction receiving unit reads the program 
and the identification number from the removable recording medium 
on which the program is recorded, and the index information output 
unit may output, to outside, the index information stored in the 

30 index information storage unit, by executing the read program only 
when the identification number satisfies a predetermined condition. 
According to this structure, only when a recording medium 
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having a specific identification nunnber is placed, the content 
reproduction apparatus can execute the program. The recording 
medium having the specific identification number is not 
commercially available so that only the development manufacturer 
5 of the content reproduction apparatus can obtain the recording 
medium. Therefore, even if a general user can create a program for 
displaying the index information, the user cannot obtain the disc for 
maintenance. Consequently, the index information in the content 
reproduction apparatus cannot be browsed. 

10 Even if the program stored in the recording medium for 

maintenance is copied, the identification number of the recording 
medium differs with the identification number of a recording 
medium at a destination of the copying. Also, the identification 
number of the recording medium at the copying destination does not 

15 have authority to execute the program. Therefore, the content 
reproduction apparatus can make the program unavailable. 

Furthermore, the instruction receiving unit may be a 
communication terminal connected to a computer network. 

According to this structure, in the case where a DVD recorder 

20 having a communication interface for updating Electric Program 
Guide (EPG) information and reserving a video recording via a 
network is used as the content reproduction apparatus, it is not 
necessary to set an interface specific for obtaining the index 
information, by using the communication interface (I/F). 

25 Also, the instruction receiving unit may be a debug terminal 

used for connecting a debug apparatus to the content reproduction 
apparatus, the debug apparatus being used during development of 
the content reproduction apparatus. 

According to this structure, the index information can be 

30 displayed to the debug apparatus using a debug interface for 
developing the content reproduction apparatus. Therefore, it is not 
necessary to set an interface specific for obtaining the index 
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information. 

Also, it can prevent the debug apparatus for developing the 
content reproduction apparatus and the general user without debug 
environment from browsing the index information without 
5 authorization. 

A content reproduction apparatus according to one of the 
other aspects of the present invention is a content reproduction 
apparatus which reproduces digital contents, comprising: a secret 
information storage unit operable to hold secret information specific 

10 to the content reproduction apparatus in a manner which does not 
allow access from outside the content reproduction apparatus; an 
index information storage unit operable to hold index information 
which is in a one-to-one association with the secret information; and 
a display unit operable to display the index information. 

15 According to this structure, the index information, which is in 

a one-to-one association with the secret information, can be easily 
known. Therefore, even after the content reproduction apparatus 
is shipped as a product, it is possible to verify, to which content 
reproduction apparatus, that the secret information (device key) 

20 embedded in the content reproduction apparatus is specific. 

Consequently, by examining the displayed index information, 
personnel of the manufacturer of the content reproduction 
apparatus and a licensor of the secret information and the index 
information can know about which secret information (device key) is 

25 embedded in the content reproduction apparatus. Therefore, the 
personnel of the content reproduction apparatus manufacturer can 
know whether or not the secret information (device key) embedded 
in the content reproduction apparatus is revoked or not by 
examining the index information. 

30 Also, the licensor can verify whether the same secret 

information (device key) is embedded in the plurality of the content 
reproduction apparatuses by examining whether or not the same 
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index information is used in the plurality of the content reproduction 
apparatuses. 

Further, the index information stored in the index information 
storage unit may be encrypted according to a predetermined 
5 cryptographic method, and a display unit may display the encrypted 
index information. 

Even if the index information is encrypted, the same index 
information encrypted with the same key has a same value. 
Therefore, the licensor of the secret information can verify whether 

10 or not the same secret information (device key) is embedded in the 
plurality of the content reproduction apparatuses by examining 
whether or not the same index information is used in the plurality of 
the content reproduction apparatuses. 

Further, a content reproduction system according to another 

15 aspect of the present invention is a content reproduction system 
which reproduces digital contents, comprising: a content 
reproduction apparatus which reproduces the digital contents; and a 
user authentication server which performs user authentication, 
wherein the content reproduction apparatus includes: a secret 

20 information storage unit operable to hold secret information specific 
to the content reproduction apparatus in a manner which does not 
allow access from outside of the content reproduction apparatus; an 
index information storage unit operable to hold index information 
which is in a one-to-one association with the secret information; a 

25 user identification information transmission unit operable to 
transmit user identification information to the user authentication 
server; an instruction receiving unit operable to receive an 
instruction to output the index information; and an index 
information output unit operable to output, based on the instruction, 

30 the index information stored in the index information storage unit. 
Further, the user authentication server includes: a user 
authentication unit operable to perform user authentication based 
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on the user identification information received fronn the content 
reproduction apparatus; and an instruction transmission unit 
operable to transmit an instruction to output the index information 
to the content reproduction apparatus, based on a result of the 
5 authentication performed by the user authentication unit. 

According to this structure, the content reproduction 
apparatus can output the index information which is in a one-to-one 
association with the secret information. Therefore, even after the 
content reproduction apparatus is shipped as a product, it is 

10 possible to verify, to which content reproduction apparatus, that the 
secret information (device key) embedded in the content 
reproduction apparatus is specific. 

Consequently, by examining the displayed index information, 
personnel of the manufacturer of the content reproduction 

15 apparatus and a licensor of the secret information and the index 
information can know about which secret information (device key) is 
embedded in the content reproduction apparatus. Therefore, the 
personnel of the content reproduction apparatus manufacturer can 
know whether or not the secret information (device key) embedded 

20 in the content reproduction apparatus is revoked or not by 
examining the index information. 

Also, the licensor can verify whether the same secret 
information (device key) is embedded in the plurality of the content 
reproduction apparatuses by examining whether or not the same 

25 index information is used in the plurality of the content reproduction 
apparatuses. 

Further, in the case where a DVD recorder having a 
communication interface for updating Electric Program Guide (EPG) 
information and reserving a video recording via a network is used as 
30 the content reproduction apparatus, it is not necessary to set an 
interface specific for obtaining the index information, by using the 
communication interface (I/F). 
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Furthermore, a user authentication server performs user 
authentication of an operator of the content reproduction apparatus. 
Therefore, it can prevent the operator without authority from 
browsing the index information without authorization. 
5 Note that, the present invention can be implemented not only 

as a content reproduction apparatus having such characteristic units 
and a content reproduction system, but also as a content 
reproduction method including the characteristic units included in 
the content reproduction apparatus as steps, and as a program for 

10 causing a computer to execute the steps included in the content 
reproduction method. Here, it is needless to say that such program 
can be distributed via a recording medium such as a CD-ROM and a 
communication network such as the Internet. 

According to a method of verifying the content reproduction 

15 apparatus specific information by the present invention, it is 
possible to verify what type of device key is embedded in the content 
reproduction apparatus even after the device key specific to the 
content reproduction apparatus is installed in a manner which the 
device key cannot be read from outside. 

20 Consequently, the present invention can provide a content 

reproduction apparatus which can tell whether the device key 
embedded in the content reproduction apparatus is revoked or not. 

Furthermore, the present invention can provide a content 
reproduction apparatus which can verify whether or not the same 

25 device key is embedded in the plurality of the content reproduction 
apparatuses. 

As further information about technical background to this 
application, the disclosure of Japanese Patent Application No. 
2004-007683 filed on January 15, 2004 including specification, 
30 drawings and claims is incorporated herein by reference in its 
entirety. 
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Brief Description of Drawings 

These and other objects, advantages and features of the 
invention will become apparent from the following description 
thereof taken in conjunction with the accompanying drawings that 
5 illustrate a specific embodiment of the invention. In the Drawings: 
FIG. 1 is an outside drawing showing a structure of a content 
reproduction system according to a first embodiment of the present 
invention. 

FIG. 2 is a block diagram showing an internal structure of the 
10 content reproduction apparatus. 

FIG. 3 is a flowchart showing a process executed by the 
content reproduction apparatus. 

FIG. 4 is a flowchart showing details of a device key index 
information obtainment process (S8 in FIG. 3). 
15 FIG. 5 is an outside drawing showing a structure of a content 

reproduction system according to a second embodiment of the 
present invention. 

FIG. 6 is a flowchart showing a process executed by a debug 
apparatus. 

20 FIG. 7 is a flowchart showing a process executed by a content 

reproduction apparatus. 

FIG. 8 is an outside drawing showing a structure of the 
content reproduction system according to a third embodiment of the 
present invention. 

25 FIG. 9 is a flowchart showing a process executed by a server. 

FIG. 10 is a flowchart showing a process executed by the 
content reproduction apparatus. 

FIG. 11 is an outside drawing showing a structure of a content 
reproduction system according to a fourth embodiment of the 
30 present invention. 

FIG. 12 is a flowchart showing a process executed by a 
computer terminal apparatus. 
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FIG- 13 is a flowchart showing a process executed by a 
content reproduction apparatus. 

FIG. 14 is an outside drawing of the content reproduction 
apparatus. 

5 FIG. 15 is a drawing showing when a cover of the content 

reproduction apparatus shown in FIG. 14 is removed. 

FIG. 16 is a diagram showing an example of a device key 
index information display unit. 

10 Detailed Description of tiie Invention 

Hereafter, it is explained about embodiments of the present 
invention with reference to drawings. In the embodiments 
explained hereafter, a content reproduction system which obtains 
device key index information embedded in a content reproduction 
15 apparatus is explained. 

(First Embodiment) 

FIG. 1 is an outside drawing showing a structure of a content 
reproduction system 100 according to a first embodiment of the 
present invention. 

20 The content reproduction system 100 is a system not only for 

reproducing digital contents, but also for displaying device key 
index information stored in a content reproduction apparatus. It 
includes a content reproduction apparatus 1, a display apparatus 3 
and an optical disc 2. 

25 The content reproduction apparatus 1 is an apparatus which 

decrypts and reproduces a digital content encrypted using a device 
key and device key index information attached to and associated in 
one to one with the device key. The device key and the device key 
index information are embedded and stored in the content 

30 reproduction apparatus 1. 

The display apparatus 3 is an apparatus which displays video 
data outputted from the content reproduction apparatus 1 on a 
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screen. 

The optical disc 2 is a recording medium in which a program 
for displaying details of the device key index information embedded 
in the content reproduction apparatus 1 to the display apparatus 3. 
5 Here, as an example of the content reproduction apparatus 1, 

there are a DVD player, a DVD recorder, a Blu-ray Disc (BD) recorder 
and the like. Also, as an example of the optical disc 2, there are a 
DVD, a BD, a CD and the like. Further, the content reproduction 
apparatus 1 and the display apparatus 3 have an interface for 

10 inputting and outputting video. As the interface for video 
input/output, an RGB terminal, a video terminal, an S terminal, a D 
terminal and the like are designed and the content reproduction 
apparatus 1 and the display apparatus 3 are connected to each other 
via a connection cable in accordance with each of the terminals. 

15 FIG. 2 is a block diagram showing an internal configuration of 

the content reproduction apparatus 1 according to the present 
embodiment. 

As described above, the content reproduction apparatus 1 is 
an apparatus which decrypts and reproduces an encrypted digital 

20 content. It includes a main processing unit 10, a video processing 
unit 11, a video output unit 12, a debug external interface (I/F) 13, 
a communication I/F 14, a disc reading unit 15, cryptographic 
processing unit 17, a RAM 18, a device ID storage unit 19, a device 
key storage unit 110, a program storage unit 111, a user 

25 authentication unit 20, and a data bus 16. 

The main processing unit 10 is a processing unit which 
controls each processing unit included in the content reproduction 
apparatus 1, inputting and outputting of each interface, and reading 
and writing data from each storage unit. The main processing unit 

30 10 includes a device key index information obtainment processing 
unit 10a. The device key index information obtainment processing 
unit 10a is a processing unit for obtaining device key index 
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information 19a stored in the device ID storage unit 19 explained 
hereafter. 

The video processing unit 11 is a processing unit which 
creates data for screen display by which the display apparatus 3 
5 converts data processed in the content reproduction apparatus 1 
into a data format which can be displayed on a screen. The video 
processing unit 11 includes a device key index information output 
processing unit 11a which outputs the device key index information 
19a obtained by the device key index information obtainment 

10 processing unit 10a via the video output unit 12. 

The video output unit 12 is a processing unit which outputs 
the data for screen display to the display apparatus 3. As the video 
output unit 12, an RGB terminal, a video terminal, a S terminal, a D 
terminal and the like are envisioned. 

15 The debug external I/F 13 is a data input/output interface 

between a debug device (apparatus) 41 which is explained in a 
second embodiment and the content reproduction apparatus 1. As 
the debug external I/F 13, a Joint Test Action Group (JTAG) terminal 
and the like are envisioned. The debug external I/F 13 includes an 

20 instruction code receiving unit 13a which receives an instruction 
code which received from the debug device 41. 

The communication I/F 14 is a communication interface for 
connecting the content reproduction apparatus 1 to an external 
network such as a Local Area Network (LAN) explained in third and 

25 fourth embodiments. As the communication I/F 14, a LAN terminal 
and the like is envisioned. The communication I/F 14 includes an 
instruction code receiving unit 14a which receives an instruction 
code via a network 5. 

The disc reading unit 15 is a processing unit which reads data 

30 recorded on an optimal disc inserted into the content reproduction 
apparatus 1 and writes data onto the optical disc. The disc reading 
unit 15 includes a program reading unit 15a which reads a program 
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stored in the optical disc 2 and transfers to tine main processing unit 
10. 

The cryptographic processing unit 17 is a processing unit 
which performs cryptography (encryption and/or decryption) 
5 necessary for reproducing content. 

The RAM 18 is a recording apparatus which temporally holds a 
program and processing data in the content reproduction apparatus 
1. 

The device ID storage unit 19 is a storage apparatus which 
10 holds the device key index information 19a attached to the device 
key embedded in the content reproduction apparatus 1. 

The device key storage unit 110 is a storage unit which holds 
a device key 110a. 

The program storage unit 111 is a storage unit which holds a 
15 program for obtaining device key index information (device key 
index information obtainment processing program 111a) executed 
by the device key index information obtainment processing unit 10a. 

As will be explained in the third embodiment, the user 
authentication unit 20 is a processing unit which requests for 
20 connection to a server (not shown in the diagram) connected via the 
network 5. 

The data bus 16 is an internal data bus for mutually 
connecting modules other than the video output unit 12 each other 
and transferring data among modules. 

25 The device key index information 19a and the device key 110a 

are encrypted by a predetermined cryptographic method such as a 
Data Encryption Standard (DES) encryption and stored respectively 
in the device ID storage unit 19 and the device key storage unit 110. 
A key used for encrypting the device key index information 19a and 

30 the device key 110a (master key 17a) are stored in the encryption 
processing unit 17 so as not to be read out from outside of the 
content reproduction apparatus. 
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The program storage unit 111 holds a program for performing 
a process in the content reproduction apparatus 1. This program 
includes the device key index information obtainment processing 
program 111a in which a process for outputting the device key index 
5 information 19a to the outside according to an external instruction is 
described. Also, these programs are compressed in data and 
recorded in the program recording unit 111, decompressed in data 
when the content reproduction apparatus 1 is powered and 
transferred to the RAM 18. 
10 Next, in the content reproduction system 100 according to the 

present embodiment, it is explained about a process of outputting 
the device key index information 19a recorded in the content 
reproduction apparatus 1 to the outside. 

FIG. 3 is a flowchart showing a process executed by the 
15 content reproduction apparatus 1. 

As shown in FIG. 1, a user inserts, into a disc insertion slot Id 
of the content reproduction apparatus 1, the optical disc 2 in which 
a program for displaying the device key index information 19a is 
stored. 

20 The disc reading unit 15 shown in FIG. 2 judges whether or 

not the optical disc 2 is inserted into the disc insertion slot Id (S2). 
After the optical disc 2 is inserted to the disc insertion unit Id (YES 
at S2), the program reading unit 15a reads the program written on 
the optical disc 2 (S4). The program reading unit 15a transfers the 

25 read program to the device key index information obtainment 
processing unit 10a of the main processing unit 10 via the data bus 
16 (S6). 

The device key index information obtainment processing unit 
10a reads an instruction code for outputting the device key index 
30 information 19a included in the read program (S7). The device key 
index information obtainment processing unit 10a executes, 
according to the instruction code, a device key index information 
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obtainment processing program 111a stored in tine RAM 18 (S8). It 
is explained later about details of the process executed by the 
device key index information obtainment processing unit 10a (SB). 
The device key index information output processing unit 11a 
5 converts the device key index information 19a obtained by the 
process (S8) into a data format which can be displayed by the 
display apparatus 3 in the video processing unit 11. After that, it 
displays the converted device key index information 19a to the 
display apparatus 3 via a connection cable (not shown in a diagram) 
10 connecting it to the video output unit 12 and the display apparatus 
3 (SIO). 

Next, it is explained about details of the process (S8) 
executed by the device key index information obtainment 
processing unit 10a. FIG. 4 is a flowchart showing details of the 

15 process (SB in FIG. 3). 

The device key index information obtainment processing unit 
10a reads encrypted device key index information stored in the 
device ID storage unit 19 (hereafter referred to as ''encrypted device 
key index information") and outputs to the cryptographic processing 

20 unit 17 (S12). The cryptographic processing unit 17 decrypts the 
encrypted device key index information using the master key 17a 
(S14). 

Through the above mentioned process, the device key index 
information 19a is displayed to the display apparatus 3. 

25 Accordingly, personnel from the manufacturer of the content 
reproduction apparatus and the licensor can know about which 
device key 110a is embedded in the content reproduction apparatus 
1 by examining the displayed device key index information 19a. 

Therefore, the personnel from the content reproduction 

30 apparatus manufacturer can know about whether the device key 
embedded in the content reproduction apparatus 1 is revoked or not 
by examining the device key index information 19a. 
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Also, the licensor can verify whether the same device key 
110a is embedded in the plurality of content reproduction 
apparatuses 1 or not by examining whether the same device key 
index information 19a is used in the plurality of content reproduction 
5 apparatuses 1 or not. 

Here, the following is an effect specific to the first 
embodiment. That is, according to the content reproduction 
system 100 in the first embodiment, the disc reading unit 15 which 
has been implemented in the content reproduction apparatus 1 and 
10 a video output interface to the outside (the video processing unit 11 
and the video output unit 12) can be used. Therefore, it is basically 
needed only to add the device key index information obtainment 
processing program 111a for outputting the device key index 
information 19a to the content reproduction apparatus 1 so that 
15 costs for adding functions remain less. 
(Second Embodiment) 

A content reproduction system according to the second 
embodiment of the present invention differs with the content 
reproduction system 100 according to the first embodiment. Other 
20 than reproducing digital contents, it displays the device key index 
information 19a stored in the content reproduction apparatus to the 
debug apparatus which is described later. 

FIG. 5 is an outside drawing showing a structure of the 
content reproduction system 200 according to the second 
25 embodiment of the present invention. 

The content reproduction system 200 includes a content 
reproduction apparatus 1, a debug apparatus 41, a display 
apparatus 42, and an input apparatus 43. 

The content reproduction apparatus 1 has a similar 
30 configuration as that of the content reproduction apparatus 1 shown 
in the first embodiment. Therefore, the detailed explanation about 
the structure is not repeated in here. 



- 19- 



The debug apparatus 41 is an apparatus for debugging a 
program and the like stored in the content reproduction apparatus 1. 
The display apparatus 42 is an apparatus which receives an output 
from the debug apparatus 41 and displays the output on a screen. 
5 The input apparatus 43 is an apparatus for inputting the input 
received from an operator of the debug apparatus 41 to the debug 
apparatus 41. 

Here, the debug apparatus 41 is same as the debug apparatus 
used in a development of the content reproduction apparatus 1. 

10 The content reproduction apparatus 1 and the debug apparatus 41 
have debug terminals, for example, such as JTAG and these 
terminals are connected to each other by a connection cable 
corresponding to a terminal for connecting debug apparatus such as 
the JTAG cable. Further, the debug apparatus 41 and the display 

15 apparatus 42, and the debug apparatus 41 and the input apparatus 
43 respectively connected to each other through a connection cable 
corresponding to a debug terminal used in the debug apparatus 41. 

Next, in the content reproduction system 200 according to the 
present embodiment, it is explained about a process of outputting 

20 the device key index information 19a stored in the content 
reproduction apparatus 1 to the outside. FIG. 6 is a flowchart 
showing a process executed by the debug apparatus 41. FIG. 7 is a 
flowchart showing a process executed by the content reproduction 
apparatus 1. 

25 The operator of the debug apparatus 41 starts the debug 

apparatus 41 in a state where it is connected to the content 
reproduction apparatus 1. Next, the operator inputs an instruction 
for displaying the device key index information 19a in the content 
reproduction apparatus 1 into the debug apparatus 41 using the 

30 input apparatus 43. 

As shown in FIG. 6, when the instruction is inputted from the 
input apparatus 43 (YES at S22), the debug apparatus 41 transmits 
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a predetermined instruction code for outputting the device key index 
information 19a to the content reproduction apparatus 1 (S24). 

In the case of receiving the device key index information 19a 
from the content reproduction apparatus 1 (YES at S26), the debug 
5 apparatus 41 converts the received device key index information 
19a into a data format which can be displayed on a screen of the 
display apparatus 42 and transmits to the display apparatus 42 
(S28). The display apparatus 42 displays the received device key 
index information 19a after the data conversion on the screen 
10 (S30). 

Next, it is explained about a process executed by the content 
reproduction apparatus 1. As shown in FIG. 7, when the instruction 
code receiving unit 13a of the debug external I/F 13 receives the 
predetermined instruction code transmitted by the debug apparatus 

15 41 (YES at S32), the device key index information obtainment 
processing unit 10a executes the device key index information 
obtainment processing program 111a stored in the PAM 18 (S36). 
After that, the device key index information obtainment processing 
unit 10a transmits the device key index information 19a to the 

20 debug apparatus 41 (S38). 

The process executed by the device key index information 
obtainment processing unit 10a (S36) is same as what is explained 
with reference to FIG. 4. Therefore, the detailed explanation about 
the process is not repeated in here. 

25 As explained in the above, according to the second 

embodiment, the following effect specific to the second embodiment 
is performed in addition to the effect indicated in the first 
embodiment. 

That is, according to the content reproduction system 200 in 
30 the second embodiment, the device key index information 19a can 
be displayed to the display apparatus 42 of the debug apparatus 41 
using a debug interface for a development of the content 
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reproduction apparatus 1 as it is. Therefore, there is a merit that a 
specific interface for obtaining the device l<ey index information 19a 
is not necessarily set in the content reproduction apparatus 1. 

In addition, using an interface for debug, it can be prevented 
5 a debug apparatus for a development of a content reproduction 
apparatus, general user without having a debug environment and 
the like from browsing the device key index information 19a without 
permission. 

(Third Embodiment) 
10 A content reproduction system according to the third 

embodiment of the present invention differs with the content 
reproduction system 100 in the first embodiment and the content 
reproduction system 200 in the second embodiment. It is a system 
of not only reproducing digital contents, but also displaying the 
15 device key index information only when an authentication by a 
server which is described later is performed. 

FIG. 8 is an outside drawing showing a structure of a content 
reproduction system 300 according to the third embodiment of the 
present invention. The content reproduction system 300 includes a 
20 content reproduction apparatus 1, a display apparatus 3 and a 
server 6. The content reproduction apparatus 1 and the server 6 
are connected to each other via a network 5 such as the Internet. 

The content reproduction apparatus 1 and the display 
apparatus 3 respectively have same structures as those of the 
25 content reproduction apparatus 1 and display apparatus 3 shown in 
the first embodiment. Therefore, the detailed explanation about 
the same structures is not repeated in here. 

The server 6 is an apparatus of transmitting an instruction 
code for outputting the device key index information 19a stored in 
30 the content reproduction apparatus 1 to the content reproduction 
apparatus 1 which performed user authentication. 

The content reproduction apparatus 1 has a communication 
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I/F 14 for connecting to the network 5. Specifically, a LAN ternninal 
and the like are envisioned. 

Next, in the content reproduction system 300 in the present 
embodiment, it is explained about a process of outputting the device 
5 key index information 19a stored in the content reproduction 
apparatus 1. FIG. 9 is a flowchart showing a process executed by 
the server 6. FIG. 10 is a flowchart showing a process executed by 
the content reproduction apparatus 1. 

As shown in FIG. 9, the server 6 judges whether a connection 

10 request from the content reproduction apparatus 1 to the server 6 is 
received or not (S52). Here, the content reproduction apparatus 1 
transmits a name of a user who operates the content reproduction 
apparatus 1 and a password corresponding to the user name. The 
server 6 receives the user name and the password and judges that 

15 the connection request to the server 6 is received. In the case of 
receiving the connection request to the server 6 (YES at S52), the 
server 6 judges whether or not a user authentication is successful by 
judging whether the pair of the user name and the password 
included in the received connection request is previously registered 

20 at the server 6 (S54). That is, the server 6 judges that the user 
authentication is successful when the pair of the user name and the 
password is previously registered at the server 6. Here, the pair of 
the user name and the password registered at the server 6 is a pair 
of a user name and a password of those who has an authority of 

25 executing displaying the device key index information. 

When the user authentication is successful (YES at S54), the 
server 6 transmits an instruction code for outputting the device key 
index information 19a to the content reproduction apparatus 1 via 
the network 5 (S56) and terminates the process. When the user 

30 authentication is failed (NO at S54), the server 6 terminates the 
process without transmitting the instruction code. 

Next, it is explained about a process executed by the content 
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reproduction apparatus 1. The operator of the content 
reproduction apparatus 1 performs predetermined operations on the 
content reproduction apparatus 1 and displays a content 
reproduction apparatus maintenance menu (not shown in the 
5 diagram) to the display apparatus 3 in order to obtain the device key 
index information 19a embedded in the content reproduction 
apparatus 1. For example, the content reproduction maintenance 
menu may be displayed to the display apparatus 3 by setting a 
switch (not shown in the diagram) specific to transfer to a 

10 maintenance mode on a body of the content reproduction apparatus 
1 and pushing the switch by the operator. 

The operator selects a menu of ''executing process of 
obtaining device key index information". Herein, the menu 
selecting operation by the operator may be performed using an 

15 operation button (not shown in the diagram) set on the body of the 
content reproduction apparatus 1 or using a remote controller (not 
shown in the diagram) attached to the content reproduction 
apparatus 1. 

After selecting the menu, the operator inputs a user name and 
20 a password. When the operator inputs the user name and the 
password, the main processing unit 10 of the content reproduction 
apparatus 1 transmits the user name and the password via the 
communication I/F 14 and the network 5 to the server 6 and 
transmits the connection request to the server 6 (S42). 
25 When the user authentication is successful in the server 6, as 

described above, an instruction code for outputting the device key 
index information 19a is transmitted from the server 6 (S 56 in FIG. 
10). Accordingly, when the instruction code receiving unit 14a of 
the communication interface I/F 14 receives the instruction code 
30 transmitted from the server 6 (YES at S44), the device key index 
information obtainment processing unit 10a executes the device key 
index information obtainment processing program 111a stored in 
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the RAM 18 (S48). 

The device key index information output processing unit 11a 
converts the device key index information 19a obtained by the 
process (S48) into a data format which can be displayed to the 
5 display apparatus 3 in the video processing unit 11. After that, the 
converted device key index information 19a is displayed to the 
display apparatus 3 via a connection cable (not shown in the 
diagram) connecting to the video output unit 12 and the display 
apparatus 3 (S50). 

10 The process executed by the device key index information 

obtainment processing unit 10a (S48) is same as what is explained 
with reference to FIG. 4. Therefore, the detailed explanation about 
the process is not repeated in here. 

As explained in the above, according to the third embodiment, 

15 there is a following unique effect in addition to the effect according 
to the first embodiment. 

That is, according to the content reproduction system 300 in 
the third embodiment, for example, in the case of where a DVD 
recorder having a communication interface for performing update of 

20 EPG information and a recording reservation via the network is used 
as the content reproduction apparatus 1, using the communication 
I/F 14, there is a merit that an interface specific for obtaining the 
device key index information 19a is unnecessary to be set. 

Also, the server 6 authenticates whether the operator of the 

25 content reproduction apparatus 1 has an authority of browsing the 
device key index information or not. Therefore, it can prevent an 
operator without the authority from browsing the device key index 
information without permission. 
(Fourth Embodiment) 

30 A content reproduction system according to a fourth 

embodiment of the present invention differs with the content 
reproduction systems 100 to 300 respectively accordingly to the 
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first to third embodiments. It is a system, in addition of 
reproducing digital contents, of displaying device key index 
information to a display apparatus connected to a computer terminal 
apparatus connected to a network. 
5 FIG. 11 is an outside drawing showing a structure of a content 

reproduction system 400 according to the fourth embodiment of the 
present invention. The content reproduction system 400 includes a 
content reproduction apparatus 1, a computer terminal apparatus 
71, a display apparatus 72 and an input terminal apparatus 73. The 
10 content reproduction apparatus 1 and the computer terminal 
apparatus 71 are connected to each other via a network 5 such as a 
LAN. 

The content reproduction apparatus 1 has a same 
configuration as the content reproduction apparatus 1 shown in the 

15 first embodiment. Therefore, the detailed explanation is not 
repeated in the description of the fourth embodiment. 

The computer terminal apparatus 71 is an ordinary computer 
terminal apparatus. The display apparatus 72 is an apparatus 
showing display information outputted from the computer terminal 

20 apparatus 71 to a screen. The input terminal apparatus 73 is an 
apparatus which inputs data to the computer terminal apparatus 71. 

The content reproduction apparatus 1 and the computer 
terminal apparatus 71 have an interface for connecting to the 
network 5. Specifically, it is envisioned to be a LAN terminal and 

25 the like. Also, a program for monitoring device key index 
information 19a in the content reproduction apparatus 1 is installed 
in the computer terminal apparatus 71. 

Next, in the content reproduction system 400 according to the 
present embodiment, a process of outputting the device key index 

30 information 19a stored in the content reproduction apparatus 1 is 
explained. FIG. 12 is a flowchart showing processes executed by 
the computer terminal apparatus 71. FIG. 13 is a flowchart 
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showing a process executed by the content reproduction apparatus 
1. 

First, in a state where the content reproduction apparatus 1 
and the computer terminal apparatus 71 are connected to each 
5 other via the network 5, an operator of the content reproduction 
apparatus 1 turns power of the content reproduction apparatus 1 on 
and transfers, from a program storage unit 111 to a RAI^ 18, a 
device key index information obtainment processing program 111a 
for monitoring the device key index information 19a. 

10 Next, the operator of the computer terminal apparatus 71 

inputs, using the input terminal apparatus 73, an instruction for 
displaying the device key index information 19a to the computer 
terminal apparatus 71. 

Responding to the input of the instruction (YES at S72), the 

15 computer terminal apparatus 71 transmits an instruction code for 
displaying the device key index information 19a to the content 
reproduction apparatus 1 via the network 5 (S74). 

When the computer terminal apparatus 71 receives the device 
key index information 19a from the content reproduction apparatus 

20 1 (YES at S76), it converts the received device key index information 
19a into a data format which can be displayed on a screen of the 
display apparatus 72 and transmits to the display apparatus 72 
(S78). The display apparatus 72 displays the received device key 
index information 19a after data conversion on the screen (S80). 

25 Next, a process executed by the content reproduction 

apparatus 1 is explained. As shown in FIG. 13, when an instruction 
code receiving unit 13a of a debug external I/F 13 receives the 
predetermined instruction code transmitted from the computer 
terminal apparatus 71 (YES at S62), a device key index information 

30 obtainment processing unit 10a executes the device key index 
information obtainment processing program 111a stored in the 
RAM18 (S66). After that, the device key index information 
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obtainment processing unit 10a transmits the device key index 
information 19a to the computer terminal apparatus 71 (S68). 

The process executed by the device key index information 
obtainment processing unit 10a (S68) is same as what is explained 
5 with reference to FIG. 4. Therefore, the detailed explanation about 
the same process is not repeated in here. 

As explained in the above, the fourth embodiment has a 
following effect in addition to the effect shown in the first 
embodiment. 

10 That is, according to the content reproduction system 400 in 

the fourth embodiment, for example, when a DVD recorder and the 
like having a communication interface for updating EPG information 
and making a reservation for recording via the network are used as 
the content reproduction apparatus 1, there is a merit that a special 

15 interface for obtaining the device key index information 19a is 
unnecessary to be set using the communication I/F 14. 

As explained in the above, according to the first to fourth 
embodiments of the present invention, device key index information 
19a unique to the content reproduction apparatus 1 can be displayed 

20 in some ways. Also, as explained in the above, the device key index 
information 19a is in a one-to-one association with the device key 
110a. Therefore, personnel of the content reproduction apparatus 
manufacturer and a licensor can know about which device key 110a 
is embedded in the content reproduction apparatus 1 by examining 

25 the displayed device key index information 19a. 

Accordingly, the personnel of the content reproduction 
apparatus manufacturer can know whether the device key 
embedded in the content reproduction apparatus 1 is revoked or not 
by examining the device key index information 19a. 

30 Also, the licensor can verify whether or not a same device key 

110a is embedded in the plurality of the content reproduction 
apparatuses 1 by examining whether the same device key index 



-28- 



information 19a is not used in the plurality of the content 
reproduction apparatuses 1. 

In the above, it is explained about the content reproduction 
system according to the present invention based on the embodiment. 
5 However, the present invention is not limited to the context of this 
embodiment. 

For example, in the embodiment, the device key index 
information 19a is encrypted and stored in the device key storage 
unit 110. However, it may be stored without the encryption. In 

10 this case, data read out from the device key storage unit 110 may be 
outputted to outside as they are when the device key index 
information 19a is outputted to the outside. 

Also, in the embodiment, the encrypted device key index 
information 19a is outputted to the outside after being decrypted at 

15 the cryptographic processing unit 17. However, the encrypted 
device key index information may be outputted to the outside as 
they are. In this case, it is assumed that a master key 17a for 
decrypting the encrypted device key index information is not stored 
in the cryptographic processing unit 17. 

20 Each apparatus which receives the encrypted device key 

index information from the content reproduction apparatus 1 stores 
a key for decryption and may obtain the device key index 
information 19a by decrypting the encrypted device key index 
information. 

25 Also, the encrypted device key index information 19a may be 

displayed to each display apparatus as they are. Further, each 
display apparatus may display the device key index information 19a 
which is decrypted by the cryptographic processing unit 17 and is 
further encrypted with another key. 

30 The pieces of encrypted device key index information 

obtained by encrypting the same pieces of device key index 
information even have a same value. Therefore, the licensor can 
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verify whether or not the same device key 110a is embedded in the 
plurality of the content reproduction apparatuses 1 by examining 
whether or not the same encrypted device key index information is 
used by the plurality of the content reproduction apparatuses 1. 
5 Furthermore, a key for decrypting the encrypted device key 

index information is secretly held by a manufacturer of each content 
reproduction apparatus so that the manufacturer only may be 
allowed to know the device key index information 19a. 
Consequently, the manufacturer which manufactured the content 

10 reproduction apparatus only can know the device key index 
information 19a. 

Also, the present invention in the first embodiment provides a 
structure in which the optical disc 2 is inserted into the content 
reproduction apparatus 1. However, it may be a semiconductor 

15 recording media such as a SD memory card or a memory stick, an IC 
card and the like. 

Further, in the first embodiment of the present invention, the 
following mechanism may be added in order to prevent a general 
user from creating an optical disc holding a program for displaying 

20 the device key index information 19a, and browsing the device key 
index information 19a in the content reproduction apparatus. 

First, an ID unique to each optical disc 2 is written in a ROM 
area of the disc when the disc is manufactured. For example, in the 
case of DVD, an ID may be written in a Burst Cutting Area (BCA). 

25 Then, an instruction code for displaying the device key index 
information 19a is executed by the content reproduction apparatus 
1 only in the case where a disc having a specific ID is inserted. The 
optical disc 2 having this specific ID is not commercially available 
but only a development manufacturer of the content reproduction 

30 apparatus can obtain as a disc for maintenance. 

Consequently, even if general user can create a program for 
displaying the device key index information 19a, he/she cannot 
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obtain the disc for maintenance. Therefore, the device key index 
information 19a in the content reproduction apparatus 1 cannot be 
browsed. 

Suppose if the program stored in the disc for maintenance is 
5 copied, an ID of the optical disc 2 differs with an ID of a disc of the 
copying destination. Also, the ID of the copying destination does 
not have authority of issuing an instruction. Therefore, the content 
reproduction apparatus 1 can make the program unavailable. 

Additionally, in the case where the manufacturer of the 

10 content reproduction apparatus whose licensor of the copyright 
protection method is a licensee applies the structure of the present 
invention for a purpose of verifying whether a device key 1 10a which 
is unique to a content reproduction apparatus is correctly embedded, 
the device key index information obtainment processing program 

15 111a and the like for outputting the described device key index 
information 19a to the outside may be enforced to be implemented 
in the content reproduction apparatus by a license and the like. 
However, following problems remain. 

That is, it is a malpractice that, whereas the device key index 

20 information obtainment processing program 111a itself is 
implemented, the device key index information 19a outputted by 
executing the device key index information obtainment processing 
program 111a differs with what is actually embedded. 

Specifically, whereas the same device key 110a and the 

25 device key index information 19a are embedded in the plurality of 
the content reproduction apparatuses 1, each of the content 
reproduction apparatuses responds to the received instruction code 
and can work a malpractice such as outputting false device key 
index information 19a which differs for each of the content 

30 reproduction apparatuses. Such malpractice can cause the licensor 
to think that a unique device key 110a is embedded in each of the 
content reproduction apparatuses 1. This malpractice can be 
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prevented as follows. 

Defining the device key index information 19a is DI, a check 
information P = F(DI) is obtained by performing a secret conversion F 
about which only the licensor knows. As for F, for example, a 
5 cryptographic process of a secret key cryptographic method in which 
a key is secret except for the licensor can be used. When the 
licensor issues a device key 110a to the content reproduction 
apparatus manufacturer that is the licensee, the licensor issues the 
check information P in addition to the device key 110a and the 

10 device key index information 19a (DI). The licensee is enforced to 
implement a program for combining and displaying the device key 
index information 19a (DI) and the check information P in the 
content reproduction apparatus by a license and the like. 

Consequently, even if the licensee creates false device key 

15 index information 19a, it cannot forge the corresponding check 
information P. Therefore, even if the content reproduction 
apparatus 1 outputs the false device key index information 19a (DI), 
it can be detected as the forged device key index information by 
examining whether or not a pair of the device key index information 

20 19a (DI) and the check information P establishes a relationship of 
P=F(DI). 

Also, the check information may be digital signature data 
using a public key cryptographic method. That is, a digital 
signature is created using a secret signature key of a licensor for the 

25 device key index information 19a (DI) as the check information P. 
The check information P which is created as described above may be 
checked using a public signature verification key corresponding to 
the signature key of the licensor. 

Also, in this method, the licensor may issue, for the licensee, 

30 when the conversion F is disclosed to the licensee, together with the 
device key 110a, data which the check information P or data 
combining the device key information DI to the check information P 
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are encrypted with a secret key about which the licensor only knows, 
and output the encrypted data together with the device key index 
information 19a. Further, a program for outputting the encrypted 
data instead of the device key index information 19a may be 
5 enforced to be implemented in the content reproduction apparatus 1. 
In this case, the licensor can obtain the encrypted data from the 
content reproduction apparatus using the program and verify 
whether the device key index information 19a is forged or not from 
the data obtained by decrypting the encrypted data with the secret 

10 key of the licensor. Here, the check information P is stored in the 
content reproduction apparatus. 

Further, the device key index information 19a may be directly 
written in the enclosure of the content reproduction apparatus 1 
instead of being displayed to the display apparatus and the like. 

15 FIG. 14 is an outside drawing of the content reproduction apparatus 
1. FIG. 15 is a drawing showing the content reproduction 
apparatus 1 when its cover is removed. The content reproduction 
apparatus 1 includes an enclosure la, a substrate lb and a device 
key index information display unit Ic. 

20 FIG. 16 is a diagram showing an example of the device key 

index information display unit Ic. In the device key index 
information display unit Ic, numeric values indicating the device key 
index information 19a in the content reproduction apparatus 1 in 
hexadecimal numbers are described. The numeric values may be 

25 directly printed by a printing method such as laser printing, or be a 
board on which the device key index information 19a is printed that 
is attached by an adhesive method such as vises, adhesives, welding 
or the like. Specifically, for example, the value indicating, in 
hexadecimal numbers, the decryption information lu disclosed in 

30 the relevant literature may be described. 

The cover of the content reproduction apparatus 1 may be 
held with screws, vises and the like in special shapes so that a 
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general user cannot remove the cover. Furthermore, a place where 
the index information is displayed is not limited to the mentioned 
place and can be anywhere unless it can tell the index information of 
the content reproduction apparatus 1. 
5 Although only some exemplary embodiments of this invention 

have been described in detail above, those skilled in the art will 
readily appreciate that many modifications are possible in the 
exemplary embodiments without materially departing from the 
novel teachings and advantages of this invention. Accordingly, all 
10 such modifications are intended to be included within the scope of 
this invention. 

The content reproduction apparatus according to the present 
invention has an effect that can obtain information (device key index 
information) relating to an individual key (device key) of the content 
15 reproduction apparatus embedded in the content reproduction 
apparatus by receiving an instruction from outside. For example, it 
is effective for a content reproduction apparatus and the like having 
a copyright protection function and holding secret information 
unique to each content reproduction apparatus. 

20 
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